-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Oct 2026 07:38:38 +0000 Source: golang-github-theupdateframework-go-tuf Binary: go-tuf golang-github-theupdateframework-go-tuf-dev golang-github-theupdateframework-go-tuf-v2-dev Architecture: source amd64 all Version: 2.4.2+0.7.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <[email protected]> Changed-By: Otto Kekäläinen <[email protected]> Description: go-tuf - framework for Securing Software Update Systems (program) golang-github-theupdateframework-go-tuf-dev - Securing software in golang (transitional package) golang-github-theupdateframework-go-tuf-v2-dev - Securing software in golang (library) Changes: golang-github-theupdateframework-go-tuf (2.4.2+0.7.0-2) unstable; urgency=medium . [ Juan Manuel Méndez Rey ] * Team upload. * Rename the library package to golang-github-theupdateframework-go-tuf-v2-dev to match the module path, and keep the old name as a transitional package. * Set XS-Go-Import-Path to github.com/theupdateframework/go-tuf/v2. Keep v0 installed at github.com/theupdateframework/go-tuf/v0, which sigstore imports. * Build-Depend and Depend on golang-github-syndtr-goleveldb-dev (v0/client/leveldbstore) and golang-golang-x-crypto-dev (v0/encrypted). Build-Depend on golang-github-dustin-go-humanize-dev and golang-golang-x-term-dev (v0/cmd) and, for the tests, on golang-github-google-gofuzz-dev and golang-gopkg-check.v1-dev. All are imported directly but were only pulled in indirectly, and goleveldb and gofuzz no longer are with go-containerregistry 0.22.1. * Disable the uscan job in Salsa CI. uscan cannot match the combined 2.4.2+0.7.0 version. Checksums-Sha1: 8349521dbb648d1ca17353d8f6ac2bff77cbc64f 3103 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.dsc 347c903457052602cecce9d1c76af5ec490286ab 645766 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0.orig.tar.gz 4eff4b17a645eadd250651acbdbe01bb502b369b 6768 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.debian.tar.xz 15242b1e46d2e7c0c7662b96821c80076cce0284 3522124 go-tuf_2.4.2+0.7.0-2_amd64.deb 14eecc9f3aeb6f1b1b3f3f73f47693ed982f31ea 4704 golang-github-theupdateframework-go-tuf-dev_2.4.2+0.7.0-2_all.deb 9306f9d8092dacf42fa66ae1356b8b9f369f11bd 209856 golang-github-theupdateframework-go-tuf-v2-dev_2.4.2+0.7.0-2_all.deb ef90cc202af47e06b1c11fd7c569caa8833f04ca 36536 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2_amd64.buildinfo Checksums-Sha256: 9413c8383883af2255545062ad244f4744bb89803e24b07453e9eec117ddc0e1 3103 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.dsc cb7330d1386c27a8a6f64fa7019455ccc48dac145d792ff5da669d17db114e01 645766 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0.orig.tar.gz 5fe849a0cc50cfd54cc14e3ab340d8d3a5e46a8ef5bb44f10ca3428b39991f26 6768 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.debian.tar.xz 555f50c2a4ff3bd29a0dc14fa0ecddd83c72b93bff326e031ee3ce00b1f1ddca 3522124 go-tuf_2.4.2+0.7.0-2_amd64.deb a3824f45f68bbda8996d0b39bd494c31e02134ab37ad2a23c0852e62194d3ac6 4704 golang-github-theupdateframework-go-tuf-dev_2.4.2+0.7.0-2_all.deb 5f24710bae27b2c114c1fa8c5fd8b03130c7e98bee5b7c5301d4dbd4dfbdad56 209856 golang-github-theupdateframework-go-tuf-v2-dev_2.4.2+0.7.0-2_all.deb fc51ab6e1930873ded09d1039c45a1099af6aed6fdaf4387151d6768ab3fd517 36536 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2_amd64.buildinfo Files: a86192748555aabe9ab6a3803c7b0364 3103 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.dsc e4b2eac21f49fd1f2ebe3584537d682c 645766 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0.orig.tar.gz 2449c802860b8de4840a2770869b4e9a 6768 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.debian.tar.xz 104111b725485e07f5499d5320b1fc6f 3522124 devel optional go-tuf_2.4.2+0.7.0-2_amd64.deb 5aa483d60ae1280b5ddb6cde657383b3 4704 oldlibs optional golang-github-theupdateframework-go-tuf-dev_2.4.2+0.7.0-2_all.deb 7759162fabd341c4c88d6f023c9d213f 209856 golang optional golang-github-theupdateframework-go-tuf-v2-dev_2.4.2+0.7.0-2_all.deb 364edf4bfd0ba87fc55fc15b43847392 36536 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbRSsR88dMO0U+RvvthEn87o2ogFAmraDNcACgkQvthEn87o 2ogVvxAApCxunvR9AFE3SSJKzkqAR1gUvYCS/C72W9pC0Fj9ClxjGDt+b/ZxQdD3 0FUa/NYq3hcT8JHbuB3PSM+AanMdKvYfzrnsovXbvdqbLRw/Mw7KPTPdHWyAMKvt 2h8ECRBso2KIeIjnsOpVN5VaMGOjijoh4LiENnFzxFvEZFUyylGlH8Oc12B/ZHSi o2yjhJzEkqMtbGdsn4aPpewTVPzo898rW7vLm2xLzFidZFa7gbdx1NDnxI2nct8B lLXJt5BkJXYhCFpgXcmZAEvryKYrxmZ/RaZhv3c08yPVYFxdEr/FE33fa1RvGAbL 1XlXOa6Fpi/0LXE+OgWNAVT4pYdU8YHZqDbHg/qH/oRLhgCUP7lZQSP4gAJmqR6Q xqKDr/Uq/PM25HlhOWFApP7w9vU3/k15lBS7I9ytr4Z0R3WvusRhYkFMA5uaN/Ue /ou0Vtkd/F9oi9AN3tpy9uoEIIOADC7sGDicrrwMKsjUAeHTnZmhjv5miGCLx2fq Bx8apd2wdzetar8h7ySbEYuJSclB+/RwpmIr27jGvCHcCXTIwFjecUDBBHy6552k t8WRzHG08m2jzB+LmHEDuIm9H8CHgrghGmF2Ai+3yEBB83OJnSZwIL3GO5i8qwbN BovVUxmUlfqvzzIOzBFGDGRjgXWAYB8t7L99EESDSDDtI9Bi3b4= =yfD3 -----END PGP SIGNATURE-----
pgpPTIbJrQhXL.pgp
Description: PGP signature

